Skip to content

Home
About
Contact Us

Core 1 A+ Training
Core 2 A+ Training
Network+ Training
SY0-501 Security+
SY0-601 Security+
Calendar
Vouchers
Members

Search for:

CompTIA SY0-401 Security+ Pop Quiz Online – Quiz #3

← Back to the Pop Quiz Online index

Click here to see how you can own all of my Security+ notes
with my 36-page downloadable PDF Course Notes.

Step 1 of 20

In which of these cases would you be most likely to use tarpitting?
- Spam filtering
- None of the above
- IPsec encryption
- Wireless network authentication
- Mitigate a DDoS attack

What kind of auditing should be used to validate your user permissions?
- Administrative auditing
- Escalation auditing
- Privilege auditing
- Operating system auditing
- Usage auditing

Which of these database types is most associated with big data?
- MySQL
- ODBC
- SQL
- RDBMS
- NoSQL

Which of these would be the best description of PAP?
- A symmetric encryption cipher
- Used for digital signatures
- A symmetric encryption cipher
- An encrypted tunnel between two locations
- Cleartext password exchange

Which of these would not be considered OS hardening?
- Require complex passwords
- Create an IPsec tunnel
- Change the management interface credentials
- Disable unnecessary accounts
- Disable unnecessary services

Which of these would restrict the installation of unapproved applications on a mobile device?
- Device encryption
- Geo-fencing
- Credential management
- MDM whitelisting
- Storage segmentation

Which of these would be an advantage of PFS?
- Vulnerabilities and attacks are identified in real-time over the network
- Mitagates some types of social engineering attacks
- Does not use a web server private key for encryption
- Increases the number of authentication factors
- Tape backups are stored with improved encryption

Which of these would be categorized as a symmetric encryption cipher?
- 3DES
- Diffie-Hellman
- MD5
- RSA
- HMAC

What protocol type (TCP/UDP) and port number is commonly used for secure terminal communication?
- tcp/25
- tcp/20
- tcp/80
- tcp/21
- tcp/22

Which of these would be the most useful attack to gain access to a WPA2-PSK network?
- Perform a dictionary attack
- Implement a DDoS attack
- Perform a buffer overflow
- Exploit a cryptographic vulnerability
- Execute a database injection

What is the AIC Triad?
- Application, Interconnection, and Contingency
- Accounting, Integrity, and Certification
- Authentication, Initialization, and Challenge
- Access, Identification, and Control
- Availability, Integrity, and Confidentiality

Which of these would not be considered an authentication factor?
- Password
- Signature
- OS installation USB flash
- Fingerprint
- GPS location

How can malware perform activities on your computer that would not normally be possible with your OS permissions?
- Man-in-the-Middle attack
- Spoofing
- Privilege Escalation
- Transitive attack
- Denial-of-service attack

What of these systems would be most likely targeted on a SCADA network?
- Manufacturing equipment
- Wireless access point
- SQL database server
- Point of sale terminal
- Multifunction printer

Which of these would be most commonly associated with a protocol analyzer?
- Validate the input of a browser-based application
- Identify a known vulnerability traversing the network
- Restrict access to websites based on category or individual URL
- Identify the sequence number of a traffic flow
- Filter ingress and egress traffic by port number or application type

In which of these would you be most likely to use TACACS+?
- Verify index settings on a SQL database
- Authenticate login credentials
- Route traffic across redundant network links
- Transfer documents between file servers
- Encrypt all network traffic sent between two sites

Which of these would be the best example of a qualitative risk?
- Upgrading the firewalls to support new encryption types is not in the budget
- The ERP software won’t receive updates because the annual maintenance fee has not been paid
- The help desk staff is not properly trained on the new ERP software
- The fine for not storing data in encrypted form is $10,000 US per incident
- An Internet outage would lose $4,000 US per minute

Which of these would be the best description of Google Mail?
- Community Cloud
- IaaS
- Private Cloud
- PaaS
- SaaS

Which attack type can obtain personal information using an IVR?
- Watering hole attack
- Man-in-the-middle
- Vishing
- Spoofing
- URL hijacking

What attack type waits for a predefined event to occur?
- Man-in-the-middle
- SQL Injection
- Rootkit
- Ransomware
- Logic bomb

← Back to the Pop Quiz Online index

Post navigation

← Previous Post

Instagram

professormesser

Training the world.

Professor Messer's Core 2 A+ Pop Quiz Test your

Professor Messer's Core 1 A+ Pop Quiz Test your

Professor Messer's Core 2 A+ Pop Quiz Test yo

Professor Messer's Network+ Pop Quiz Test your

Professor Messer's Core 1 A+ Pop Quiz Test yo

Professor Messer's Core 2 A+ Pop Quiz Test your

Professor Messer's Core 1 A+ Pop Quiz Test your

Professor Messer's Security+ Pop Quiz Test your

Professor Messer's Core 2 A+ Pop Quiz Test your

Professor Messer's Core 1 A+ Pop Quiz Test

Professor Messer's Network+ Pop Quiz Test your

Follow on Instagram

Current Month

april

wed21apr12:00 pm2:00 pmVirtual EventSY0-601 Security+ Study Group - April 2021Where are you going? Go ahead.12:00 pm - 2:00 pm EDT

Time

(Wednesday) 12:00 pm - 2:00 pm EDT

Location

URL: https://professormesser.com/live/

Register

Calendar GoogleCal

may

tue04may12:00 pm2:00 pmVirtual Event220-1001 A+ Study Group - May 2021Where's my charging cable?12:00 pm - 2:00 pm EDT

Time

(Tuesday) 12:00 pm - 2:00 pm EDT

Location

Professor Messer Website

URL: https://professormesser.com/live/

Calendar GoogleCal

thu06may12:00 pm2:00 pmVirtual Event220-1002 A+ Study Group - May 2021The box of cables is supposed to look like that.12:00 pm - 2:00 pm EDT

Time

(Thursday) 12:00 pm - 2:00 pm EDT

Location

Professor Messer Website

URL: https://professormesser.com/live/

Register

Calendar GoogleCal

wed12may12:00 pm2:00 pmVirtual EventN10-007 Network+ Study Group - May 2021My routing table is missing a leg.12:00 pm - 2:00 pm EDT

Time

(Wednesday) 12:00 pm - 2:00 pm EDT

Location

URL: https://professormesser.com/live/

Register

Calendar GoogleCal

wed19may12:00 pm2:00 pmVirtual EventSY0-601 Security+ Study Group - May 2021Where are you going? Go ahead.12:00 pm - 2:00 pm EDT

Time

(Wednesday) 12:00 pm - 2:00 pm EDT

Location

URL: https://professormesser.com/live/

Register

Calendar GoogleCal

Categories

Free CompTIA A+ Training
- A+ Study Group Archive
- CompTIA A+ 220-1001
- CompTIA A+ 220-1002
- CompTIA A+ Pop Quiz Archive
Free CompTIA Network+ Training
- CompTIA Network+ N10-007
- Network+ Pop Quiz Archive
- Network+ Study Group Archive
Free CompTIA Security+ Training
- CompTIA Security+ SY0-501
- CompTIA Security+ SY0-601
  - SY0-601 Videos
- Security+ Study Group Archive

Recent Posts

Mobile Deployment Models – SY0-601 CompTIA Security+ : 3.5
Mobile Device Enforcement – SY0-601 CompTIA Security+ : 3.5
Mobile Device Security – SY0-601 CompTIA Security+ : 3.5
Mobile Device Management – SY0-601 CompTIA Security+ : 3.5
Mobile Networks – SY0-601 CompTIA Security+ : 3.5

Site Information

Contact Us
About Messer Studios
Privacy Policy
Terms of Service

Copyright © 2021 Messer Studios LLC. All rights reserved.

"Professor Messer" and the Professor Messer logo are registered trademarks of Messer Studios, LLC.

Core 1 A+ Training
Core 2 A+ Training
Network+ Training
SY0-501 Security+
SY0-601 Security+
Calendar
Vouchers
Members

X